Cal Corum 2fe7163c89 fix: resolve MEDIUM-severity issues from code review ... Prompt injection mitigation: - Wrap user question in <user_question> XML tags in LLM prompt - Add system prompt instruction to treat tagged content as untrusted Docker security: - Bind ChromaDB and API ports to localhost only (127.0.0.1) - Remove redundant DB init command from api service (lifespan handles it) - Remove deprecated version field and unused volume definitions - Add API_SECRET env var to api and discord-bot services Gitea labels fix: - Remove string labels from API payload (Gitea expects integer IDs) - Include label names as text in issue body instead Conversation cleanup: - Add periodic background task in lifespan (every 5 minutes) - Cleans up conversations older than CONVERSATION_TTL (default 30 min) - Graceful cancellation on shutdown Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-08 16:04:25 -05:00
..
__init__.py	refactor: hexagonal architecture with ports & adapters, DI, and test-first development	2026-03-08 15:51:16 -05:00
container.py	fix: resolve MEDIUM-severity issues from code review	2026-03-08 16:04:25 -05:00
settings.py	fix: resolve HIGH-severity issues from code review	2026-03-08 16:00:26 -05:00